Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA3B1596DA4C11EF900821BC762E951A.roa
File: BA3B1596DA4C11EF900821BC762E951A.roa (raw, json)
Hash identifier: OnIcFNBbc86biA5kCrTp1yLhUafP1wqem9TKS9sf/nw=
Subject key identifier: 1E:78:2E:DA:9B:3E:5A:43:B4:30:D0:F7:6B:7C:E4:70:1E:27:1C:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014698
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA3B1596DA4C11EF900821BC762E951A.roa
Signing time: Fri 24 Jan 2025 12:14:15 +0000
ROA not before: Fri 24 Jan 2025 12:14:11 +0000
ROA not after: Sat 01 Mar 2025 12:14:11 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83608 (0x14698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:14:11 2025 GMT
Not After : Mar 1 12:14:11 2025 GMT
Subject: CN=67938417-cde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:93:03:0d:0a:0f:df:89:05:07:98:d7:cc:
25:39:81:b9:2d:c9:6b:33:a4:e1:ea:cd:0e:ee:9c:
05:67:34:18:f7:fa:e1:f3:3d:de:e2:80:e7:4b:09:
4a:fc:a8:f1:8a:c1:97:46:6c:d5:2f:c3:e5:6a:77:
b4:10:2a:54:0b:9b:8a:68:90:23:95:ed:84:0d:aa:
55:17:81:f9:14:59:76:de:6b:ae:a0:d5:8a:a9:13:
0e:67:ca:44:85:91:2f:c0:09:36:71:e9:05:01:4d:
d8:a7:46:a5:7c:ce:b4:65:7e:fa:c9:44:43:61:47:
c5:5d:84:12:ab:a8:32:59:4f:1e:5f:f4:13:36:29:
2b:f7:4f:fe:be:b8:fb:dd:8c:86:07:6e:f0:a3:73:
10:bb:fa:cd:f9:cd:a4:db:59:0a:2b:1c:de:e7:37:
1d:3d:d3:7a:b0:c1:61:32:ff:cd:38:2e:88:6f:1e:
00:59:dd:17:ca:37:a5:e3:be:26:3a:6d:80:6d:83:
0f:73:24:0e:91:64:2c:e4:af:f0:9e:b8:eb:68:58:
51:bc:28:4e:ff:b1:de:a3:4f:bb:bb:34:be:39:61:
40:89:51:75:6a:0a:60:eb:ab:ab:df:22:e5:82:b7:
40:f5:bf:c9:d7:d4:24:61:e3:1a:0e:89:10:73:31:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:78:2E:DA:9B:3E:5A:43:B4:30:D0:F7:6B:7C:E4:70:1E:27:1C:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA3B1596DA4C11EF900821BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f6:a8:6b:c7:80:32:32:30:45:a8:2c:47:2d:bb:4a:3c:8d:
68:2d:01:8c:5b:fb:09:19:fb:67:da:d0:64:49:26:72:5f:da:
b6:08:2c:bc:f1:e9:5f:a4:4d:04:28:f9:84:b5:5a:08:d7:32:
b2:a5:cc:88:42:08:08:f7:33:67:a9:42:f7:0f:e4:ef:c5:b5:
77:79:2d:51:e4:d5:12:ba:70:4e:05:bd:7f:1a:7a:64:b5:63:
6f:59:46:ad:93:00:a5:94:be:e9:f5:d3:64:c1:e5:d9:45:b7:
3d:51:5a:99:22:e6:1e:15:7f:c0:52:83:ff:2e:07:2f:c3:26:
81:d4:76:2e:4a:86:bb:75:c3:8c:f8:9c:ca:96:5e:f0:7d:dd:
48:a6:78:d1:55:0c:03:60:a8:a4:fa:dd:b5:a3:f5:e5:d5:03:
11:da:b8:28:09:fd:4f:56:a0:3e:01:d0:22:24:a5:b8:9c:36:
d9:96:ee:38:94:55:fa:77:49:d1:3d:19:a4:9d:8a:ff:70:15:
1c:d4:9b:9e:82:36:0a:2d:e3:73:ed:51:24:3f:d2:88:f6:6c:
fd:a4:ed:5e:f6:7a:b0:03:e5:05:9f:46:0e:85:ec:4c:ea:a4:
7f:4b:d7:72:27:5d:ac:c8:90:cb:15:7d:d7:e7:84:e0:8d:dd:
a7:26:41:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUaYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIxNDExWhcNMjUwMzAxMTIxNDExWjAYMRYw
FAYDVQQDEw02NzkzODQxNy1jZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1oSTAw0KD9+JBQeY18wlOYG5LclrM6Th6s0O7pwFZzQY9/rh8z3e4oDn
SwlK/KjxisGXRmzVL8Plane0ECpUC5uKaJAjle2EDapVF4H5FFl23muuoNWKqRMO
Z8pEhZEvwAk2cekFAU3Yp0alfM60ZX76yURDYUfFXYQSq6gyWU8eX/QTNikr90/+
vrj73YyGB27wo3MQu/rN+c2k21kKKxze5zcdPdN6sMFhMv/NOC6Ibx4AWd0Xyjel
474mOm2AbYMPcyQOkWQs5K/wnrjraFhRvChO/7Heo0+7uzS+OWFAiVF1agpg66ur
3yLlgrdA9b/J19QkYeMaDokQczFJwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB54
LtqbPlpDtDDQ92t85HAeJxyRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQTNCMTU5NkRBNEMxMUVGOTAwODIxQkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsvYMA0GCSqGSIb3DQEB
CwUAA4IBAQBA9qhrx4AyMjBFqCxHLbtKPI1oLQGMW/sJGftn2tBkSSZyX9q2CCy8
8elfpE0EKPmEtVoI1zKypcyIQggI9zNnqUL3D+TvxbV3eS1R5NUSunBOBb1/Gnpk
tWNvWUatkwCllL7p9dNkweXZRbc9UVqZIuYeFX/AUoP/LgcvwyaB1HYuSoa7dcOM
+JzKll7wfd1IpnjRVQwDYKik+t21o/Xl1QMR2rgoCf1PVqA+AdAiJKW4nDbZlu44
lFX6d0nRPRmknYr/cBUc1JuegjYKLeNz7VEkP9KI9mz9pO1e9nqwA+UFn0YOhexM
6qR/S9dyJ12syJDLFX3X54Tgjd2nJkGF
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:36 2025 by rpki-client